Information Security Policies provide a framework that guides the organization and protects the assets of that organization. Consider the SEU privacy policy discussed in Question One, which aims to ensure the privacy of sensitive information. This sensitive information may be vulnerable to some information security threats.

1. Choose at least one SEU information asset and identify the information sensitivity level based on SEU privacy policy (i.e., Low, Middle, or Highly sensitive information).
2. List at least two security threats to the chosen sensitive information asset, two vulnerabilities that might allow a threat to occur, and two risks resulting from the threats and vulnerabilities.

Note: Write your answer in the table below.

Information Assets	Information Sensitivity Level	Threats	Vulnerabilities	Risks